$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E72FC6EF09411EDB2F9B443C4F9AE02.roa File: 4E72FC6EF09411EDB2F9B443C4F9AE02.roa (raw, json) Hash identifier: upuuY7aV31BGVFF1v+lpzuByblMX3YaqTwoMUHlNT5w= Subject key identifier: 8D:31:B1:8F:E4:F6:D8:62:6B:7D:DF:B0:25:67:61:61:D0:95:60:DB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71F8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E72FC6EF09411EDB2F9B443C4F9AE02.roa Signing time: Fri 12 May 2023 07:12:08 +0000 ROA not before: Fri 12 May 2023 07:12:08 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150638 IP address blocks: 103.127.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29176 (0x71f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 12 07:12:08 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645de6c8-51ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:05:5f:dd:4f:33:73:9b:22:97:1e:75:01:ae: 28:6d:12:e1:9a:39:f0:38:99:a3:d3:de:09:c5:8f: bf:dc:b3:15:e1:8e:0c:5a:35:30:bd:85:b8:9a:73: 5d:31:5c:42:7b:86:79:59:3b:c2:ba:12:e1:69:be: 2f:97:7e:9b:8e:c8:f2:02:00:8d:7b:37:0b:54:cc: 79:ed:ea:f8:a7:5a:88:01:df:8e:b5:ab:ae:9b:24: 36:2b:1c:f8:33:32:5b:9a:02:43:99:21:5f:e5:1b: ea:da:cd:26:41:cf:35:ac:4b:20:59:ed:2f:db:e4: f3:81:4e:63:ed:00:0f:e1:0d:db:dd:85:69:0e:c9: 13:3b:42:4b:4f:83:cd:c1:66:69:3f:8e:37:c3:c0: 48:30:a4:35:3b:16:53:fc:f5:28:19:2b:d1:0d:d5: 60:7c:40:b6:68:06:5d:39:22:87:50:ff:a9:90:e0: b6:0a:55:b5:59:19:28:e9:e0:23:b6:46:78:e4:ca: 34:8c:17:69:50:4f:93:c5:db:6c:53:27:5f:b9:d5: 18:17:d8:bb:61:14:e8:36:f4:71:8b:8e:17:a7:3a: 23:7d:92:df:16:fa:2b:5c:8d:47:cb:e2:d9:d8:ba: 4b:dd:01:9b:6c:20:dc:96:2a:7e:6a:58:37:35:d3: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:B1:8F:E4:F6:D8:62:6B:7D:DF:B0:25:67:61:61:D0:95:60:DB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E72FC6EF09411EDB2F9B443C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.35.0/24 Signature Algorithm: sha256WithRSAEncryption b1:8f:dc:cc:b0:a9:d5:28:1b:a0:a7:81:b6:47:fe:da:da:d6: 5b:27:40:d5:c3:50:2c:01:41:51:f5:0c:d2:56:f5:ba:7b:0b: 3d:ff:a2:69:fe:91:61:e7:28:29:e8:fb:88:e0:59:ce:05:51: 35:c6:b0:9c:e4:52:6f:a0:06:c7:e6:6d:26:01:62:e1:8a:e3: d3:71:94:74:af:9f:19:cc:56:a4:eb:67:83:2f:20:62:52:67: f7:aa:ef:a5:5b:08:9f:37:44:58:44:cc:8a:30:6e:0d:bd:eb: 3c:56:7a:20:cd:58:a7:86:ae:77:2f:4a:eb:87:68:05:15:65: e4:c8:83:ac:88:16:46:ec:8a:e4:64:bb:4c:67:ff:72:1c:d1: ce:9f:35:35:40:cf:43:a1:a4:e5:91:ec:27:be:e3:f6:25:ea: fe:a8:27:db:f8:43:65:dc:60:58:4e:33:af:1e:84:91:79:90: ce:e9:3b:8c:fe:53:6f:c3:0c:27:b1:85:e9:ad:11:60:ef:0c: f0:24:47:64:fb:8d:c5:92:ab:32:36:c3:80:63:c6:55:ea:cb: 91:60:e3:53:48:15:17:87:13:0e:3c:ad:c3:b1:fc:b1:11:55: 18:50:72:94:15:83:4f:ef:b6:4d:bb:83:96:ae:72:0c:d1:ba: 52:38:df:0b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEyMDcxMjA4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDVkZTZjOC01MWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+QVf3U8zc5silx51Aa4obRLhmjnwOJmj094JxY+/3LMV4Y4MWjUwvYW4mnNd MVxCe4Z5WTvCuhLhab4vl36bjsjyAgCNezcLVMx57er4p1qIAd+OtauumyQ2Kxz4 MzJbmgJDmSFf5Rvq2s0mQc81rEsgWe0v2+TzgU5j7QAP4Q3b3YVpDskTO0JLT4PN wWZpP443w8BIMKQ1OxZT/PUoGSvRDdVgfEC2aAZdOSKHUP+pkOC2ClW1WRko6eAj tkZ45Mo0jBdpUE+TxdtsUydfudUYF9i7YRToNvRxi44XpzojfZLfFvorXI1Hy+LZ 2LpL3QGbbCDclip+alg3NdPTQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI0xsY/k 9thia33fsCVnYWHQlWDbMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEU3MkZDNkVG MDk0MTFFREIyRjlCNDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfyMwDQYJKoZIhvcNAQELBQADggEBALGP3MywqdUoG6Cn gbZH/tra1lsnQNXDUCwBQVH1DNJW9bp7Cz3/omn+kWHnKCno+4jgWc4FUTXGsJzk Um+gBsfmbSYBYuGK49NxlHSvnxnMVqTrZ4MvIGJSZ/eq76VbCJ83RFhEzIowbg29 6zxWeiDNWKeGrncvSuuHaAUVZeTIg6yIFkbsiuRku0xn/3Ic0c6fNTVAz0OhpOWR 7Ce+4/Yl6v6oJ9v4Q2XcYFhOM68ehJF5kM7pO4z+U2/DDCexhemtEWDvDPAkR2T7 jcWSqzI2w4BjxlXqy5Fg41NIFReHEw48rcOx/LERVRhQcpQVg0/vtk27g5aucgzR ulI43ws= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org